Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
File: _0t7padsE3FS0NDzUk_WIBuBW-8.cer (raw, json)
Hash identifier: PBfJngR6e24s5MKiwFJdfkUdfk+VF1xITydYL6im6Ik=
Subject key identifier: FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019600DA8AFF25142C70A02DA61B7A077ECB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Apr 2025 12:50:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2.58.108.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:da:8a:ff:25:14:2c:70:a0:2d:a6:1b:7a:07:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 4 12:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3d:49:2d:39:fd:f3:7b:49:53:23:b2:46:9f:
dd:7d:76:55:43:9f:bf:74:33:fd:b4:19:2f:8a:a1:
f4:20:96:13:16:23:7d:5a:3c:59:53:e3:89:40:76:
04:29:a5:6e:da:67:3c:00:3c:21:69:9c:43:a8:34:
4c:aa:23:69:8c:9d:12:17:78:e3:81:9e:6e:2f:f1:
6c:07:43:26:d8:79:d4:6a:0a:f3:1e:ce:9e:08:d2:
d6:dc:e8:4a:49:4d:e6:75:75:5e:17:93:41:31:1b:
e0:23:f1:f6:fd:a5:64:03:ff:7d:f1:f9:85:48:08:
2d:92:82:d0:75:8c:5d:5b:48:21:ba:76:01:1c:1b:
82:66:06:5b:97:c2:78:9d:5a:f7:55:4f:05:2d:73:
ef:be:6d:6e:1a:f0:b2:e0:1d:61:95:8a:9f:1a:dc:
5e:fd:db:99:a8:41:dd:9e:c0:ce:4a:b6:4b:97:5a:
a6:50:c1:3a:8b:08:3c:5a:73:29:9d:22:90:1e:42:
f1:7a:c5:94:88:87:f3:2e:9e:e6:ee:61:cc:23:91:
2e:1f:7e:19:7d:4d:fe:52:38:76:21:ae:ab:53:aa:
0d:a9:84:67:58:a2:5e:32:d1:56:b6:09:a4:5e:6e:
74:fa:dd:5a:e7:22:1a:04:9e:cf:02:15:59:30:39:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.108.0/22
Signature Algorithm: sha256WithRSAEncryption
24:0e:d2:bb:0c:89:4e:4a:df:45:11:08:f3:d9:53:6d:2b:4a:
b5:61:7e:70:2d:82:8c:95:d3:0a:01:38:e0:79:83:b6:63:ac:
5c:b8:dc:12:fb:b2:4b:67:e1:b4:b0:d3:8b:e2:f5:18:6e:53:
60:4b:0d:d9:cf:44:5a:71:62:7a:ee:73:6f:d3:02:b6:21:85:
a3:3c:fa:c3:f1:eb:c4:5c:65:67:7f:c5:d3:f6:54:fa:f4:0c:
05:b5:4d:21:8a:e3:e1:88:63:01:73:9a:58:c3:14:f6:91:4b:
d1:a4:12:7d:0c:6e:fb:61:bd:3d:a8:83:a8:47:74:96:d4:38:
2c:66:7f:15:25:af:83:39:3a:c0:ea:dc:86:ef:35:45:13:db:
c0:f6:76:85:89:0b:25:65:da:3f:e8:b8:08:cd:69:a5:84:6e:
a5:8e:a7:c6:fd:96:f1:05:31:01:6d:28:c3:d5:7c:4d:90:25:
e9:7b:fc:3a:10:17:34:cc:60:86:06:7e:da:83:ca:b3:96:00:
30:04:6c:3e:16:87:08:b6:1a:c0:8f:f7:22:64:7f:49:24:04:
28:2b:ad:6c:51:33:c2:33:20:80:07:72:e0:37:68:f6:98:52:
84:8e:99:a6:95:d6:f0:eb:0f:35:25:2f:e4:64:de:0c:51:ee:
dc:15:93:c0
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZYA2or/JRQscKAtpht6B37LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNDA0MTI1MDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjRiN2JhNWE3NmMxMzcxNTJkMGQwZjM1MjRmZDYyMDFiODE1YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD1JLTn983tJUyOyRp/dfXZVQ5+/
dDP9tBkviqH0IJYTFiN9WjxZU+OJQHYEKaVu2mc8ADwhaZxDqDRMqiNpjJ0SF3jj
gZ5uL/FsB0Mm2HnUagrzHs6eCNLW3OhKSU3mdXVeF5NBMRvgI/H2/aVkA/998fmF
SAgtkoLQdYxdW0ghunYBHBuCZgZbl8J4nVr3VU8FLXPvvm1uGvCy4B1hlYqfGtxe
/duZqEHdnsDOSrZLl1qmUME6iwg8WnMpnSKQHkLxesWUiIfzLp7m7mHMI5EuH34Z
fU3+Ujh2Ia6rU6oNqYRnWKJeMtFWtgmkXm50+t1a5yIaBJ7PAhVZMDnT9wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFP9Le6WnbBNxUtDQ81JP1iAbgVvvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzk1YjE4
Ni1mMmJhLTRjODMtYjYzMC04Zjk1Yjg1MjRjMzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvOTViMTg2
LWYyYmEtNGM4My1iNjMwLThmOTViODUyNGMzNS8xL18wdDdwYWRzRTNGUzBORHpV
a19XSUJ1QlctOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCAjpsMA0GCSqGSIb3DQEBCwUAA4IBAQAkDtK7
DIlOSt9FEQjz2VNtK0q1YX5wLYKMldMKATjgeYO2Y6xcuNwS+7JLZ+G0sNOL4vUY
blNgSw3Zz0RacWJ67nNv0wK2IYWjPPrD8evEXGVnf8XT9lT69AwFtU0hiuPhiGMB
c5pYwxT2kUvRpBJ9DG77Yb09qIOoR3SW1DgsZn8VJa+DOTrA6tyG7zVFE9vA9naF
iQslZdo/6LgIzWmlhG6ljqfG/ZbxBTEBbSjD1XxNkCXpe/w6EBc0zGCGBn7ag8qz
lgAwBGw+FocIthrAj/ciZH9JJAQoK61sUTPCMyCAB3LgN2j2mFKEjpmmldbw6w81
JS/kZN4MUe7cFZPA
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:17 2025 by rpki-client on console.sobornost.net